Distributed resource management system and method, credential information management system, medium

Abstract

The present disclosure relates to the technical field of Internet, and relates to a distributed resource management system and method, a risk guarantee contract voucher information management system and method, a storage medium and an electronic device. The resource management system comprises a terminal module, a gateway routing module, a resource processing module and an interstellar file system layer; the terminal module is used for obtaining information resources and encrypting the information resources to obtain encrypted resources; the gateway routing module is used for performing activity detection on nodes in the interstellar file system layer according to pre-stored node identifiers, determining effective nodes in the interstellar file system layer according to the activity detection result and maintaining the number of effective nodes; the resource processing module is used for maintaining a multi-level node linked list corresponding to the effective nodes according to the activity detection result and the number of effective nodes, and scheduling target effective nodes to process the encrypted resources by using the multi-level node linked list. The present disclosure detects effective nodes and schedules the effective nodes to process the encrypted resources by using the node linked list, thereby improving the security of resource storage and improving the resource processing efficiency.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of Internet, and more particularly, to a distributed resource management system and method, a risk guarantee contract voucher information management system and method, a computer storage medium and an electronic device. BACKGROUND

[0002] In many scenarios, with the sharp increase in business volume, many times more file resources need to be saved than before, and many business scenarios involve a large amount of customer private data, such as risk guarantee contract voucher information, and thus higher requirements are put forward for resource management, that is, while ensuring the storage capacity, the safe and reliable storage of information resources also needs to be ensured.

[0003] In the related art, a large amount of data resources are maintained by using a traditional relational database or based on various big data processing engines, which requires complex technology and high physical device cost, bandwidth cost, and due to unreliable central node downtime or hacker attacks, the data is easily tampered with or lost, and the security of mass data storage is difficult to guarantee.

[0004] It should be noted that the information disclosed in the above background section is only used to strengthen the understanding of the background of the present disclosure, and therefore can include information that does not constitute prior art known to those of ordinary skill in the art. SUMMARY

[0005] The purpose of the present disclosure is to provide a distributed resource management system and method, a risk guarantee contract voucher information management system and method, a computer storage medium and an electronic device, thereby at least to some extent improving the safe and reliable storage of mass resource information and the processing efficiency of resource information.

[0006] Other characteristics and advantages of the present disclosure will become apparent from the following detailed description, or will be learned by practice of the present disclosure.

[0007] According to one aspect of the present disclosure, a distributed resource management system is provided, which comprises a terminal module, a gateway routing module, a resource processing module and an interstellar file system layer for storing information resources; the terminal module is used to obtain information resources and encrypt them to obtain encrypted resources; the gateway routing module is used to perform active detection on nodes in the interstellar file system layer according to pre-stored node identifiers, determine effective nodes in the interstellar file system layer according to the active detection results, and maintain the number of effective nodes according to the active detection results; the resource processing module is used to maintain a multi-level node linked list corresponding to the effective nodes according to the active detection results and the number of effective nodes, and use the multi-level node linked list to schedule a target effective node to process the encrypted resources.

[0008] In an example embodiment of the present disclosure, the gateway routing module comprises: an active detection unit configured to detect the nodes in the file system layer according to pre-stored node identifiers to filter down nodes whose node identifiers change; a supplementary node determination unit configured to, when there are more than a preset number of threshold filtered nodes, randomly detect a target node, and search for active and healthy nodes within a preset distance value as a radius from the target node to obtain a supplementary node; and an identifier configuration unit configured to assign node identifiers to the target node and the supplementary node, and take the target node and the supplementary node with the node identifiers as the valid nodes.

[0009] In an example embodiment of the present disclosure, the resource processing module comprises: a node linked list maintenance unit configured to divide the valid nodes into a plurality of node tables, wherein the plurality of node tables comprise a cache node table and a core node table, and the number of nodes in the cache node table is less than the number of nodes in the core node table; a node updating unit configured to update the supplementary node to the core node table; and a node synchronization unit configured to synchronize the supplementary node in the core node table to the cache node table at a preset time interval.

[0010] In an example embodiment of the present disclosure, the resource processing module further comprises: a node scheduling unit configured to, in response to a resource processing request from the terminal module, obtain a target valid node from the cache node table; and the node scheduling unit is further configured to, when the target valid node does not exist in the cache node table, obtain the target valid node from the core node table.

[0011] In an example embodiment of the present disclosure, the resource processing module further comprises: an encryption unit configured to encrypt the key of the encrypted resource; the encryption unit is further configured to encrypt the information resource that is not encrypted by the terminal module in the information resource; and a storage unit configured to store the encrypted resource encrypted by the encryption unit in the valid node.

[0012] In an example embodiment of the present disclosure, the resource processing module further comprises: a naming unit configured to name the encrypted resource stored in the valid node, and store the correspondence between the actual name of the valid node and the naming result; and a naming result feedback unit configured to feed back the correspondence to the terminal module.

[0013] In an exemplary embodiment of the present disclosure, the resource processing module further comprises a path planning unit configured to plan a query path to a valid node corresponding to the resource query operation instruction in response to the resource query operation instruction carrying the corresponding relationship from the terminal module, and feed back the query path to the target valid node so as to execute a query operation according to the query path by the target valid node.

[0014] According to an aspect of the present disclosure, there is provided a management system for risk guarantee contract credential information, comprising a terminal module, a gateway routing module, a resource processing module, and an interstellar file system layer for storing risk guarantee contract credential information; the terminal module is configured to obtain risk guarantee contract credential information and encrypt the risk guarantee contract credential information to obtain encrypted risk guarantee contract credential information; the gateway routing module is configured to perform activity detection on nodes in the interstellar file system layer according to pre-stored node identifiers, determine valid nodes in the interstellar file system layer according to the activity detection results, and maintain the number of valid nodes according to the activity detection results; the resource processing module is configured to maintain a node linked list corresponding to the valid nodes according to the activity detection results and the number of valid nodes, and use the node linked list to schedule a target valid node to process the encrypted risk guarantee contract credential information.

[0015] According to an aspect of the present disclosure, there is provided a distributed resource management method applied to the distributed resource management system described in any one of the above, comprising: a terminal module obtaining information resources and encrypting the information resources to obtain encrypted resources; a gateway routing module performing activity detection on nodes in the interstellar file system layer according to pre-stored node identifiers, determining valid nodes in the interstellar file system layer according to the activity detection results, and maintaining the number of valid nodes according to the activity detection results; and a resource processing module maintaining a node linked list corresponding to the valid nodes according to the activity detection results and the number of valid nodes, and using the node linked list to schedule a target valid node to process the encrypted resources.

[0016] According to an aspect of the present disclosure, there is provided a management method for risk guarantee contract credential information, comprising: a terminal module obtaining risk guarantee contract credential information and encrypting the risk guarantee contract credential information to obtain encrypted risk guarantee contract credential information; a gateway routing module performing activity detection on nodes in the interstellar file system layer according to pre-stored node identifiers, determining valid nodes in the interstellar file system layer according to the activity detection results, and maintaining the number of valid nodes according to the activity detection results; and a resource processing module maintaining a node linked list corresponding to the valid nodes according to the activity detection results and the number of valid nodes, and using the node linked list to schedule a target valid node to process the encrypted risk guarantee contract credential information.

[0017] According to one aspect of the present disclosure, a computer storage medium is provided, which stores a computer program, and the computer program is executed by a processor to implement the distributed resource management method or the management method of risk guarantee contract voucher information according to any one of the above.

[0018] According to one aspect of the present disclosure, an electronic device is provided, comprising: a processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the distributed resource management method or the management method of risk guarantee contract voucher information according to any one of the above via executing the executable instructions.

[0019] The distributed resource management system in the exemplary embodiments of the present disclosure comprises a terminal module, a gateway routing module, a resource processing module and an interstellar file system file layer for storing information resources; the terminal module is used for obtaining information resources and encrypting the information resources to obtain encrypted resources; the gateway routing module is used for performing active detection on nodes in the interstellar file system file layer according to pre-stored node identifiers, determining valid nodes in the interstellar file system file layer according to the active detection results, and maintaining the number of valid nodes according to the active detection results; the resource processing module is used for maintaining a multi-level node linked list corresponding to the valid nodes according to the active detection results and the number of valid nodes, and scheduling target valid nodes to process the encrypted resources by using the multi-level node linked list.

[0020] On one hand, the gateway routing module performs active detection on nodes in the interstellar file system file layer according to pre-stored node identifiers to obtain valid nodes, filters out illegal nodes and down nodes, and avoids resource loss and leakage caused by central node downtime, network attacks or virus ransom; at the same time, the number of valid nodes is maintained based on the active detection results to ensure that a sufficient number of valid nodes process information resources and improve the processing reliability of information resources; on the other hand, the terminal module encrypts information resources to improve information security, and stores the information resources in the valid nodes in the interstellar file system file layer, so that the resources are distributed to a large number of nodes and are not easy to be tampered with, which not only further ensures the security of information, but also reduces the time consumed for verifying the authenticity of files; on the other hand, the resource processing module maintains a multi-level node linked list of valid nodes and uses it to schedule valid nodes to process encrypted resources, which accelerates the storage and query of resources and improves the resource processing efficiency.

[0021] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the present disclosure. BRIEF DESCRIPTION OF DRAWINGS

[0022] The above and other objects, features and advantages of the present disclosure exemplary embodiments will be more apparent from the following detailed description read in conjunction with the accompanying drawings, in which:

[0023] Figure 1 A structural schematic diagram of a distributed resource management system according to an exemplary embodiment of the present disclosure is shown;

[0024] Figure 2 A structural schematic diagram of a gateway routing module according to an exemplary embodiment of the present disclosure is shown;

[0025] Figure 3 A structural schematic diagram of a resource processing module according to an exemplary embodiment of the present disclosure is shown;

[0026] Figure 4 A structural schematic diagram of a resource processing module according to an exemplary embodiment of the present disclosure is shown;

[0027] Figure 5 A structural schematic diagram of a resource processing module according to an exemplary embodiment of the present disclosure is shown;

[0028] Figure 6 A structural schematic diagram of a resource processing module according to an exemplary embodiment of the present disclosure is shown;

[0029] Figure 7 A structural schematic diagram of a distributed resource management system according to an exemplary embodiment of the present disclosure is shown;

[0030] Figure 8 A flowchart of a distributed resource management method according to an exemplary embodiment of the present disclosure is shown;

[0031] Figure 9 A flowchart of a distributed resource management method according to an exemplary embodiment of the present disclosure is shown;

[0032] Figure 10 A structural schematic diagram of a storage medium according to an exemplary embodiment of the present disclosure is shown; and

[0033] Figure 11 A block diagram of an electronic device according to an exemplary embodiment of the present disclosure is shown.

[0034] In the drawings, the same or corresponding parts are denoted by the same or corresponding reference numerals. DETAILED DESCRIPTION

[0035] Exemplary embodiments now will be described more fully hereinafter with reference to the accompanying drawings; however, the exemplary embodiments can be implemented in any number of ways, and are not limited to the examples described herein. In the drawings, like reference numerals indicate like elements in different views, and thus their detailed descriptions can be omitted. It should be noted that the illustrative embodiments described herein can be used in a variety of applications, including as examples, medical procedures, industrial applications, and / or the like.

[0036] Furthermore, the described features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. In the following description, numerous specific details are provided, such as examples of programming, software modules, user selections, network transactions, database queries, database structures, hardware modules, hardware- specific instructions, data structures, server components, and data combinations, in order to provide a thorough understanding of the present disclosure. However, it will be recognized that the technology described herein can be practiced without one or more of the specific details. In other instances, well-known structures, materials, or operations have not been shown or described in detail in order to avoid obscuring aspects of the present disclosure.

[0037] The block diagrams in the drawings show functions and functionality, which can be implemented in software executed by digital hardware, including one or more processors, microcontrollers, ASICs or other digital hardware. The software can be stored in any type of non-transitory computer- readable medium or memory, for example hard disks, CD-ROMs, optical storage, RAM of different magnitudes, etc. and loaded into the digital hardware using any suitable method. In the description provided herein, numerous specific

[0038] In many business scenarios, a large amount of file data needs to be saved, and often involves customer private data, for example, in the current vehicle insurance business, there are personnel, vehicles, driving information, electronic insurance policies, contracts, various business data such as pictures, videos, text files, and other information resources, and with the popularization of new energy vehicles, the per capita vehicle ownership is increasing year by year, so the vehicle insurance business faces several times more file resources than in the past. Therefore, in order to ensure the safety of a large amount of customer data, the validity and legality of electronic insurance policies and various contracts, and prevent these information data from being leaked, tampered with or damaged, the current resource storage cannot be underestimated.

[0039] In the related art, traditional relational databases or various big data processing engines are used to maintain and process massive data resources, which requires complex technology and high physical device cost, bandwidth cost, and due to unreliable central node downtime or hacker attacks, the data may be tampered with or lost, and the security of massive data storage is difficult to guarantee.

[0040] IPFS (Inter Planetary File System, star file system) is a p2p (peer-to-peer) distributed file system, which provides a high-throughput content addressing block storage model with content addressing hyperlinks. IPFS has no single fault node, and nodes do not need to trust each other. By maintaining the IPFS network, the information resources are distributed to a large number of nodes, which not only improves the security and reliability of resources, but also reduces the storage cost and maintenance cost of massive data.

[0041] Based on this, in the example embodiments of the present disclosure, a distributed resource management system is first provided. Referring to Figure 1 The distributed resource management system 100 includes a terminal module 110, a gateway routing module 120, a resource processing module 130, and an interplanetary file system layer 140 for storing information resources, specifically,

[0042] The terminal module 110 is configured to obtain information resources and encrypt the information resources to obtain encrypted resources;

[0043] The gateway routing module 120 is configured to perform active detection on the nodes in the interplanetary file system layer 140 according to the pre-stored node identifiers, determine the effective nodes in the interplanetary file system layer 140 according to the active detection results, and maintain the number of effective nodes according to the active detection results;

[0044] The resource processing module 130 is configured to maintain a multi-level node linked list corresponding to the effective nodes according to the active detection results and the number of effective nodes, and use the multi-level node linked list to schedule the target effective nodes to process the encrypted resources.

[0045] According to the distributed resource management system in the example embodiments, on the one hand, the gateway routing module performs active detection on the nodes in the interplanetary file system layer according to the pre-stored node identifiers to obtain effective nodes, filters out illegal nodes and down nodes, and avoids resource loss and leakage caused by central node downtime, network attacks or virus ransom; at the same time, the number of effective nodes is maintained based on the active detection results to ensure that a sufficient number of effective nodes process information resources and improve the processing reliability of information resources; on the other hand, the information resources are encrypted by the terminal module to improve information security, and the information resources are stored in the effective nodes in the interplanetary file system layer, so that the resources are distributed to a large number of nodes and are not easy to be tampered with, which not only further ensures the security of information, but also reduces the time consumed for verifying the authenticity of the file; on the other hand, the multi-level node linked list of the effective nodes is maintained by the resource processing module and used to schedule the effective nodes to process the encrypted resources, which accelerates the storage and query of resources and improves the resource processing efficiency.

[0046] The distributed resource management system in the example embodiments of the present disclosure will be described below.

[0047] The terminal module 110 is configured to acquire an information resource and encrypt the information resource to obtain an encrypted resource.

[0048] In the exemplary embodiments of the present disclosure, the terminal module 110 performs real-time monitoring input, encryption and uploading of the information resource by accessing a terminal device; wherein the terminal device includes but is not limited to a monitoring device, an IOT (Internet of Things) module, a smart terminal device (such as a smart phone, etc.) and a business workstation, etc. For example, for vehicle insurance business, real-time monitoring input of vehicle information, encryption and uploading of a policy and a contract can be performed by accessing a terminal device.

[0049] The gateway routing module 120 is configured to perform active detection on nodes in the IPFS layer 140 according to pre-stored node identifiers, determine valid nodes in the IPFS layer 140 according to the active detection result, and maintain the number of valid nodes according to the active detection result. In the exemplary embodiments of the present disclosure, the valid nodes are nodes after filtering out illegal nodes and down nodes, and are configured to process the encrypted resource, such as storage, query, etc. In some possible implementation manners, the IPFS layer 140 can be a private alliance IPFS network of an enterprise, such as a distributed resource system developed based on the IPFS protocol. In some possible implementation manners, the IPFS layer 140 can be an alliance IPFS network jointly maintained by multiple enterprises or departments, such as a private alliance IPFS network of an enterprise, and the nodes in the private networking IPFS network are jointly maintained as nodes in a public IPFS network. Based on this, the encrypted resource can be distributed to more valid nodes, the storage speed is accelerated, the storage cost of massive data is shared, and the repeated construction and maintenance cost of the storage layer is reduced. The present disclosure stores the encrypted resource to the IPFS layer 140, the resource information is uniquely determined, private modification will result in new data, and the encrypted resource is distributed to a large number of different valid nodes, preventing the encrypted resource from being tampered with at will, not being lost, and because the nodes of each party can quickly reach a consensus, the time spent on verifying the authenticity and validity of the file is reduced.

[0050] In the exemplary embodiments of the present disclosure, referring to Figure 2As shown, the gateway routing module 120 can include an activity detection unit 1201, a supplementary node determination unit 1202, and an identifier configuration unit 1203; wherein the activity detection unit 1201 is configured to detect the activity of the nodes in the interstellar file system layer 140 according to the pre-stored node identifiers, so as to filter out the down nodes whose node identifiers have changed; the supplementary node determination unit 1202 is configured to randomly detect the activity of a target node when there are more than a preset number threshold of nodes being filtered out, and search for active and healthy nodes within a preset distance value as a radius centering on the target node, to obtain a supplementary node; and the identifier configuration unit 1203 is configured to allocate node identifiers to the target node and the supplementary node, and take the target node and the supplementary node with the node identifiers as valid nodes.

[0051] Specifically, the gateway routing module 120 pre-stores the identifier information of each node, for example, a globally unique hash value, which can be used by the activity detection unit 1201 to detect the activity of each node in real time according to the node identifier. If a node is down, the node identifier will change, so the down node can be filtered out. An illegal node is a node that does not reach a consensus with other nodes and does not participate in networking. Since the gateway routing module 120 does not store the node identifier of the illegal node, the activity detection unit 1201 can filter out the illegal node according to the node identifier.

[0052] Further, if there are more than a preset number threshold of nodes being filtered out, the activity of other nodes needs to be detected randomly by the supplementary node determination unit 1202 for supplementation, so as to ensure that there are enough valid nodes to process information resources. The preset number threshold and the preset distance value can be set according to actual needs, for example, the preset number threshold is 1 / 2, 1 / 3, etc. of the number of nodes in the interstellar file system layer, and the present application does not make special limitations on this.

[0053] In addition, in order to subsequently detect the activity of the valid nodes according to the node identifiers, the identifier configuration unit 1203 is configured to configure node identifiers for the target node and the supplementary node.

[0054] Based on this, the network routing module 120 can ensure that there are enough valid nodes to process resource data, and ensure the reliability of information resource processing.

[0055] The resource processing module 130 is configured to maintain a multi-level node linked list corresponding to the valid nodes according to the activity detection result and the number of valid nodes, and use the multi-level node linked list to schedule a target valid node to process encrypted resources.

[0056] In the exemplary embodiments of the present disclosure, referring to Figure 3As shown, the resource processing module 130 can include a node linked list maintenance unit 1301, a node updating unit 1302, and a node synchronization unit 1303; wherein the node linked list maintenance unit 1301 is configured to divide the valid nodes into a plurality of node linked lists, specifically, the plurality of node linked lists include a cache node table and a core node table, and the number of nodes in the cache node table is less than the number of nodes in the core node table. Further, the node updating unit 1302 is configured to update the supplemental nodes determined by the supplemental node determining unit 1202 to the core node table, and then, through the node synchronization unit 1303, the supplemental nodes in the core node table are synchronized to the cache node table at a predetermined time interval.

[0057] Specifically, the node linked list maintenance unit 1301 divides all valid nodes into a cache node table and a core node table, and the number of nodes in the cache node table is less than the number of nodes in the core node table. Based on this, when the resource processing module 130 subsequently schedules valid nodes to process encrypted resources using the cache node table and the core node table, the target valid node can be quickly and preferentially obtained from the cache node table without having to query and obtain from the core node table which stores a large number of valid nodes, thereby improving the efficiency of determining the target node and improving the processing efficiency of information resources. Further, when there are new supplemental nodes, the supplemental nodes are first updated to the core node table by the node updating unit 1302, and the cache node table will not change temporarily, so that the target valid node obtained from the cache node table to process resource information will not be affected; then, the supplemental nodes in the core node table can be synchronized to the cache node table at a predetermined time interval by the node synchronization unit 1303. The predetermined time interval can be set according to actual business processing requirements, subject to the principle of not affecting the processing of information resources by calling valid nodes in the cache node table. In this way, it can be ensured that the cache node table is also supplemented with supplemental nodes on time, and the nodes and information resources in the entire resource processing module are synchronized.

[0058] In the exemplary embodiments of the present disclosure, continuing to refer to Figure 3 The resource processing module 130 can further include a node scheduling unit 1304 configured to obtain a target valid node from the cache node table in response to a resource processing request from the terminal module 110; and the node scheduling unit 1304 is further configured to obtain the target valid node from the core node table when the target valid node does not exist in the cache node table.

[0059] Specifically, according to the resource processing request of the terminal module 110, such as a resource query, a storage request, etc., the node scheduling unit 1304 can first obtain a target effective node in the cache node table, and the node in the cache node table can be in a down state, such as an offline state of an effective node caused by power failure, etc. In this case, the node scheduling unit 1304 continues to obtain a target effective node from the core node, thereby ensuring that the target effective node can be obtained in time to process the information resource, avoiding an increase in response time, and improving processing efficiency.

[0060] In the example embodiment of the present disclosure, referring to Figure 4 As shown in the figure, the resource processing module 130 can include an encryption unit 1305 and a storage unit 1306; the encryption unit 1305 is configured to encrypt the key of the encrypted resource, and / or encrypt the information resource that is not encrypted by the terminal module 110.

[0061] Specifically, when it is necessary to add a resource to the interstellar file system layer 140, first, the encryption unit 1305 encrypts the key of the encrypted resource obtained by encrypting the terminal module 110, or encrypts the resource in the information resource that is not encrypted by the terminal module 110, and then packs and uploads the encrypted resource to the interstellar file system 140, which broadcasts and permanently stores the encrypted resource. By encrypting the key encrypted by the terminal module 110 again, the storage security of the information resource is further ensured, and tampering and leakage are prevented. In addition, the terminal module 110 can have information resources that are not encrypted, and the encryption unit 1305 can perform supplementary encryption, thereby further ensuring the security of the information resource.

[0062] In some possible implementation manners, the terminal module 110 can encrypt target information resources in the information resources by using RSA (public key cryptography system) to obtain encrypted resources, and then the encryption unit 1305 can perform secondary encryption on the key of the encrypted resources by using AES (Advanced Encryption Standard) to ensure the secure storage of the resources, where the number of the encrypted resources encrypted by the terminal module is less than the key value of AES; the encryption unit 1305 is also configured to encrypt information resources that are not encrypted by the terminal module 110, that is, the data of the file in the information resources can be encrypted by using AES, where according to the requirement of the AES encryption algorithm, the 16-byte key and the 8-byte IV value (initialization vector) are converted into hexadecimal, and 32-byte key and 16-byte IV value are obtained, and then the file output after two times of encryption includes a header file, RSA encryption key + IV and AES encryption data of the original file. Through twice encryption of the information resources, the security and tamper resistance of the information can be effectively ensured, and finally the encrypted resources encrypted by the encryption unit 1306 are stored in the effective node by the storage unit 1402.

[0063] In the example embodiments of the present disclosure, referring to Figure 5 The resource processing module 130 can further include a naming unit 1307 and a naming result feedback unit 1308, where the naming unit 1307 is configured to name the encrypted resources stored in the effective node, and store the correspondence between the actual name of the effective node and the naming result, the naming unit 1307 can name the encrypted resources as a short resource name friendly to human-computer interaction, such as a simple number, letter or character, or a number, character and character combination, so as to facilitate the user to view and perform resource query service based on the short resource name, for example, the actual name of the information resource is QmQhkjTcEJ7sB6VVBDkJ3weeRHa4onKo71XxGz8JuKT2n7, and the naming result is mylfpsFile, the mapping relationship between the actual name and the naming result is stored, and the corresponding relationship is fed back to the terminal module 110 by the naming result feedback unit 1308, so as to find the actual name and obtain the resource according to the naming result.

[0064] In the example embodiments of the present disclosure, the gateway routing module 120 is also configured to determine a current idle node from the effective node as a target effective node, and the specific query service can be processed through the current idle node. For example, Figure 6As shown, the resource processing module 130 can further include a path planning unit 1309 for planning a query path to the effective node corresponding to the resource query operation instruction from the terminal module 110 based on the correspondence. Specifically, if the user initiates a resource query request through the terminal module 110, the resource query request carries the correspondence fed back to the terminal module 110 by the naming result feedback unit 1308, the path planning unit 1309 finds the corresponding effective node according to the correspondence. Since the number of effective nodes is multiple, it is necessary to go to each node to obtain information resources, and the query path to each effective node can be obtained through the path planning unit 1309, and the optimal path is determined as the final search path, based on which the query efficiency of information resources can be greatly improved. The optimal path can be the shortest query path for querying information resources.

[0065] Further, in the exemplary embodiments of the present disclosure, the path planning unit 1309 is further configured to feed back the query path to the target effective node, such as the current idle node, routed by the gateway routing module 120, so as to execute the query operation through the current idle node. Based on this, after obtaining the query path through the path planning unit 1309, a reliable node is routed to process the specific query operation, thereby reducing the response time and the waiting time of user query.

[0066] For the above encryption mode, the file decryption can be performed in the following manner: when a target effective node performs resource query, the file is first downloaded into the memory, then the encryption key is extracted from the file header, and the RSA private key is used to decrypt the key, then the IV value is extracted from the header, and finally the decrypted file is decrypted using the obtained decryption key and IV value. It should be noted that when other encryption algorithms are used for twice encryption of information resources, other corresponding decryption methods can also be used, and the present application does not make special limitation.

[0067] In the exemplary embodiments of the present disclosure, referring to Figure 7 As shown, the distributed resource management system of the present disclosure can further include an authentication module 150 for checking the legality of the identity of the user logging into the system through the terminal module 110, including permission management and authentication management, to prevent illegal user operations on the information resources of the system. The identity information provided by the user logging into the system can be matched with the stored authentication parameters. If matched, the user is allowed to log into the system to perform management operations such as storage and query of information resources. If not matched, the user is denied access to the system. It should be noted that when the user uses the system for the first time, a user identifier is allocated to the user for access, and is stored for subsequent authentication use, thereby improving the access security of the distributed resource management system of the present disclosure.

[0068] The distributed resource management system of the present disclosure, the gateway routing module carries out activity detection to the nodes in the interstellar file system layer according to the pre-stored node identifier to obtain effective nodes, filters out illegal nodes and down nodes, avoids the resource loss and leakage caused by the central node down, network attack or virus ransom of information resources; at the same time, the number of effective nodes is maintained based on the activity detection result, so as to ensure that a sufficient number of effective nodes process information resources and improve the processing reliability of information resources; the terminal module is used for encrypting information resources, improving information security, and storing information resources in the effective nodes in the interstellar file system layer, so that the resources are distributed to a large number of nodes and are not easy to be tampered with, not only further ensuring the security of information, but also reducing the time consumed for verifying the authenticity of files; the resource processing module is used for maintaining the multi-level node linked list of the effective nodes and scheduling the effective nodes to process encrypted resources, accelerating the storage and query of resources, and improving the resource processing efficiency.

[0069] It should be noted that although several modules or units of the distributed resource management system are mentioned in the foregoing detailed description, such division is not mandatory. In fact, according to the embodiments of the present disclosure, the features and functions of two or more modules or units described above can be embodied in one module or unit. Conversely, the features and functions of one module or unit described above can be further divided into a plurality of modules or units.

[0070] According to one aspect of the present disclosure, a risk guarantee contract voucher information management system is also provided, which comprises a terminal module, a gateway routing module, a resource processing module and an interstellar file system layer for storing risk guarantee contract voucher information; specifically,

[0071] The terminal module is used for obtaining risk guarantee contract voucher information and encrypting the risk guarantee contract voucher information to obtain encrypted risk guarantee contract voucher information.

[0072] The gateway routing module is used for carrying out activity detection to the nodes in the interstellar file system layer according to the pre-stored node identifier, determining the effective nodes in the interstellar file system layer according to the activity detection result, and maintaining the number of effective nodes according to the activity detection result.

[0073] The resource processing module is used for maintaining the node linked list corresponding to the effective nodes according to the activity detection result and the number of effective nodes, and scheduling the target effective nodes to process the encrypted risk guarantee contract voucher information by using the node linked list. In an exemplary embodiment of the present disclosure, the gateway routing module comprises:

[0074] The active detection unit is configured to detect the nodes in the interplanetary file system layer according to the pre-stored node identifier, so as to filter the down nodes with changed node identifier; the supplementary node determination unit is configured to randomly detect a target node when there are more than a preset number of threshold of nodes being filtered, and search for active and healthy nodes with the target node as the center and a preset distance value as the radius, to obtain the supplementary nodes; and the identifier configuration unit is configured to allocate node identifiers to the target nodes and the supplementary nodes, and take the target nodes and the supplementary nodes with the node identifiers as valid nodes.

[0075] In an example embodiment of the present disclosure, the resource processing module comprises: a node linked list maintenance unit configured to divide the valid nodes into a plurality of node linked lists, the plurality of node linked lists comprising a cache node table and a core node table, and the number of nodes in the cache node table being less than the number of nodes in the core node table; a node updating unit configured to update the supplementary nodes to the core node table; and a node synchronization unit configured to synchronize the supplementary nodes in the core node table to the cache node table at a preset time interval.

[0076] In an example embodiment of the present disclosure, the resource processing module further comprises: a node scheduling unit configured to obtain a target valid node from the cache node table in response to a resource processing request from the terminal module; and the node scheduling unit is further configured to obtain the target valid node from the core node table when the target valid node does not exist in the cache node table.

[0077] In an example embodiment of the present disclosure, the resource processing module comprises: an encryption unit configured to encrypt the key of the encrypted risk protection contract credential information; the encryption unit is further configured to encrypt the risk protection contract credential information which is not encrypted by the terminal module; and a storage unit configured to store the encrypted risk protection contract credential information encrypted by the encryption unit in the valid node.

[0078] In an example embodiment of the present disclosure, the resource processing module further comprises: a naming unit configured to name the encrypted risk protection contract credential information stored in the valid node, and store the correspondence between the actual name of the valid node and the naming result; and a naming result feedback unit configured to feed back the correspondence to the terminal module.

[0079] In an example embodiment of the present disclosure, the resource processing module further comprises: a path planning unit configured to plan a query path to the valid node corresponding to the resource query operation instruction carrying the correspondence in response to a resource query operation instruction from the terminal module; and the path planning unit is further configured to feed back the query path to the target valid node, so that the target valid node performs the query operation according to the query path.

[0080] In an example embodiment of the present disclosure, the system further comprises an authentication module configured to verify the legitimacy of the identity of a user logging into the system via the terminal module.

[0081] Since the various functional modules of the risk guarantee contract information management system of the example embodiment of the present disclosure are the same as the various functional modules in the inventive embodiments of the distributed resource management system described above, no further elaboration is provided herein.

[0082] According to an aspect of the present disclosure, a distributed resource management method is also provided, which is applied to any of the distributed resource management systems described above, Figure 8 A flowchart of a distributed resource management method according to an example embodiment of the present disclosure is shown in FIG. 8, which comprises the following steps: Figure 8

[0083] In step S810, the terminal module acquires information resources and encrypts the information resources to obtain encrypted resources.

[0084] In step S820, the gateway routing module performs active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers, determines the effective nodes in the interstellar file system layer according to the active detection results, and maintains the number of effective nodes according to the active detection results.

[0085] In step S830, the resource processing module maintains the node linked list corresponding to the effective nodes according to the active detection results and the number of effective nodes, and uses the node linked list to schedule the target effective nodes to process the encrypted resources.

[0086] In an example embodiment of the present disclosure, the active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers, and the determination of the effective nodes in the interstellar file system layer according to the active detection results, comprise:

[0087] First, the active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers is performed to filter the down nodes whose node identifiers have changed. Second, when there are more than a preset number of threshold nodes being filtered, a target node is randomly probed, and within a preset distance value as a radius from the target node, active and healthy nodes are searched to obtain supplemental nodes. Finally, the target nodes and the supplemental nodes are assigned with node identifiers, and the target nodes and the supplemental nodes with the node identifiers are taken as the effective nodes.

[0088] In an example embodiment of the present disclosure, the active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers by the gateway routing module, and the determination of the effective nodes in the interstellar file system layer according to the active detection results, and the maintenance of the number of effective nodes according to the active detection results, comprise:

[0089] ​Firstly, the effective nodes are divided into a plurality of node linked lists, including a cache node table and a core node table, the number of nodes in the cache node table is less than the number of nodes in the core node table; secondly, the supplementary nodes are updated to the core node table; finally, the supplementary nodes in the core node table are synchronized to the cache node table at a preset time interval.

[0090] In the present disclosure, the target effective node can be obtained from the cache node table in response to a resource processing request from the terminal module, and the target effective node can be obtained from the core node table when the target effective node does not exist in the cache node table.

[0091] In the exemplary embodiments of the present disclosure, the node linked list corresponding to the effective node is maintained according to the active detection result and the number of effective nodes, and the target effective node is scheduled to process the encrypted resource by using the node linked list, and the method further comprises:

[0092] First, the key of the encrypted resource is encrypted; second, the information resource that is not encrypted by the terminal module in the information resource is encrypted; finally, the encrypted resource after the secondary encryption is stored in the effective node.

[0093] In the exemplary embodiments of the present disclosure, the effective node is scheduled to process the encrypted resource, and the method further comprises:

[0094] The encrypted resource stored in the effective node is named, and the correspondence between the actual name of the effective node and the naming result is stored, and the correspondence is fed back to the terminal module.

[0095] In the exemplary embodiments of the present disclosure, the effective node is scheduled to process the encrypted resource, and the method further comprises:

[0096] In response to the resource query operation instruction carrying the correspondence from the terminal module, a query path to the effective node corresponding to the resource query operation instruction is planned; the query path is fed back to the target effective node, so that the target effective node executes the query operation according to the query path, wherein the target effective node can be an idle node or an effective node storing data to be queried.

[0097] In the exemplary embodiments of the present disclosure, before the information resource is collected by the terminal module and encrypted, the method further comprises: verifying the legality of the user identity logged into the system by the terminal module.

[0098] The distributed resource management method of the present disclosure will be described in detail below. Figure 9 The distributed resource management method of the present disclosure will be described in detail below.

[0099] In step S910, when a terminal user logs into the distributed resource management system through a terminal module, the terminal user is first authenticated by an authentication module to control whether the user logs in, if the authentication is passed, the user is allowed to log in the system, if the authentication is not passed, the user is refused to log in and access;

[0100] In step S920, the nodes in the IPFS layer are probed for activity by a gateway routing module, illegal nodes and down nodes are filtered out, and valid nodes are obtained;

[0101] In step S930, when it is needed to add an information resource to the IPFS layer, the encrypted resource encrypted by the terminal module is encrypted again by a resource processing module, and the twice-encrypted resource is packaged and uploaded to the valid nodes in the IPFS layer and broadcasted;

[0102] In step S940, the twice-encrypted resource stored in the valid nodes is named by the resource processing module to obtain a short resource name friendly to human-computer interaction, and is fed back to the terminal module;

[0103] In step S950, when an information resource needs to be queried, a query path to the valid node corresponding to the resource query operation instruction of the terminal module is planned in response to the resource query operation instruction based on the short resource name, and is fed back to a current idle node to execute the query operation through the current idle node; wherein the current idle node can be obtained from the cache node table by the node scheduling unit, or when not obtained from the cache node table, is obtained from the core node table.

[0104] Based on the distributed resource management method of the present disclosure, a large amount of information resources of Internet of Things, Internet of Vehicles, etc. can be stored, and the information resources are permanently saved to the valid nodes on the IPFS chain, avoiding data damage, loss or leakage caused by central node downtime, network attacks, network virus ransom, and greatly reducing the response time of data query, reducing the cost of physical devices and bandwidth, and can be widely applied to business scenarios that need to store a large amount of information resources, such as vehicle insurance, life insurance, and other resource management industries involving a large amount of private information.

[0105] Since the various functional modules in the distributed resource management method of the exemplary embodiments of the present disclosure are the same as those in the inventive embodiments of the distributed resource management system described above, they will not be described here.

[0106] According to one aspect of the present disclosure, a risk guarantee contract voucher information management method is also provided, which comprises:

[0107] The terminal module obtains the risk guarantee contract voucher information and encrypts it to obtain encrypted risk guarantee contract voucher information;

[0108] The gateway routing module performs active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers, determines the effective nodes in the interstellar file system layer according to the active detection results, and maintains the number of effective nodes according to the active detection results.

[0109] The resource processing module maintains the node linked list corresponding to the effective nodes according to the active detection results and the number of effective nodes, and uses the node linked list to schedule the target effective nodes to process the encrypted risk guarantee contract voucher information. In an example embodiment of the present disclosure, the active detection is performed on the nodes in the interstellar file system layer according to the pre-stored node identifiers, and the effective nodes in the interstellar file system layer are determined according to the active detection results, including:

[0110] First, the active detection is performed on the nodes in the interstellar file system layer according to the pre-stored node identifiers to filter the down nodes whose node identifiers change; second, when there are more than a preset number of threshold nodes filtered, a target node is randomly probed, and within a preset distance value as a radius, the activated and healthy nodes are searched to obtain supplementary nodes; finally, the target nodes and the supplementary nodes are assigned with node identifiers, and the target nodes and the supplementary nodes with the node identifiers are taken as the effective nodes.

[0111] In an example embodiment of the present disclosure, the gateway routing module performs active detection on the nodes in the interstellar file system layer according to the pre-stored node identifiers, determines the effective nodes in the interstellar file system layer according to the active detection results, and maintains the number of effective nodes according to the active detection results, including:

[0112] First, the effective nodes are divided into a plurality of node linked lists, the plurality of node linked lists including a cache node table and a core node table, the number of nodes in the cache node table being less than the number of nodes in the core node table; second, the supplementary nodes are updated to the core node table; finally, the supplementary nodes in the core node table are synchronized to the cache node table at a preset time interval.

[0113] In the present disclosure, the target effective nodes can be obtained from the cache node table in response to a resource processing request from the terminal module, and when the target effective nodes do not exist in the cache node table, the target effective nodes can be obtained from the core node table.

[0114] In an example embodiment of the present disclosure, the node linked list corresponding to the effective nodes is maintained according to the active detection results and the number of effective nodes, and the target effective nodes are scheduled to process the encrypted risk guarantee contract voucher information using the node linked list, further including:

[0115] The encryption risk guarantee contract credential information is encrypted by a key; secondly, the risk guarantee contract credential information in the terminal module which is not encrypted is encrypted; finally, the encrypted risk guarantee contract credential information after the secondary encryption is stored in the effective node.

[0116] In the example embodiment of the present disclosure, the scheduling effective node processes the encrypted risk guarantee contract credential information, comprising:

[0117] The encrypted risk guarantee contract credential information stored in the effective node is named, and the correspondence between the actual name of the effective node and the naming result is stored, and the correspondence is fed back to the terminal module.

[0118] In the example embodiment of the present disclosure, the scheduling effective node processes the encrypted risk guarantee contract credential information, further comprising:

[0119] In response to the resource query operation instruction carrying the correspondence from the terminal module, a query path to the effective node corresponding to the resource query operation instruction is planned; the query path is fed back to the target effective node, so that the target effective node executes the query operation according to the query path, wherein the target effective node can be an idle node or an effective node storing data to be queried.

[0120] In the example embodiment of the present disclosure, before the risk guarantee contract credential information is collected by the terminal module and encrypted, it further comprises: verifying the legitimacy of the user identity logged into the system by the terminal module.

[0121] Since each functional module in the risk guarantee contract credential information management method of the example embodiment of the present disclosure is the same as the above-mentioned risk guarantee contract credential information management system, it will not be repeated here.

[0122] In addition, in the example embodiment of the present disclosure, a computer storage medium capable of realizing the above-mentioned method is also provided. A program product capable of realizing the above-mentioned method of the present disclosure is stored thereon. In some possible embodiments, each aspect of the present disclosure can also be realized in the form of a program product, which includes program code for causing the terminal device to execute the steps described in the above-mentioned “example method” section according to various example embodiments of the present disclosure when the program product runs on the terminal device.

[0123] Reference Figure 10As shown, a program product 1000 for implementing the above-described method according to the exemplary embodiments of the present disclosure is described, which can employ a portable compact disc read-only memory (CD-ROM) and include program codes, and can be run on a terminal device, such as a personal computer. However, the program product of the present disclosure is not limited thereto, and in the present document, the readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus or device.

[0124] The program product can employ any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium, for example, can be, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or any combination thereof. More specific examples (a non-exhaustive list) of the readable storage medium include an electrical connection having one or more wires, a portable disc, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0125] The computer readable signal medium can include a data signal propagated in baseband or propagated as a carrier wave in a propagated data signal, in which the readable program codes are carried. Such a propagated data signal can take on many forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination thereof. The readable signal medium can also be any readable medium that is not a readable storage medium and that can transmit, propagate or transport the program for use by or in connection with an instruction execution system, apparatus or device.

[0126] The program codes contained on the readable medium can be transmitted by any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0127] Program code to implement an operation of the present disclosure can be written in any combination of one or more programming languages, including an object oriented programming language such as Java, C++ or the like, and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code can execute entirely on the user's computing device, partly on the user's device, as a stand-alone software package, partly on the user's device and partly on a remote computing device or entirely on the remote computing device or server. In the latter scenario, the remote computing device can be connected to the user's device through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection can be made to an external computing device, such as through the Internet using an Internet Service Provider.

[0128] Furthermore, in an exemplary embodiment of the present disclosure, an electronic device capable of implementing the above-described method is provided. Those skilled in the art can understand that each aspect of the present disclosure can be implemented as a system, a method or a program product. Therefore, each aspect of the present disclosure can be embodied as a whole hardware embodiment, a whole software embodiment (including firmware, microcode, etc.), or an embodiment combining hardware and software aspects, which can be collectively referred to as "circuitry", "module" or "system" herein.

[0129] The electronic device 1100 according to this embodiment of the present disclosure will be described below with reference to Figure 11 Figure 11 The electronic device 1100 shown is merely an example and should not limit the function and usage range of the embodiments of the present disclosure.

[0130] As shown in Figure 11 The electronic device 1100 is in the form of a general computing device. The components of the electronic device 1100 can include, but are not limited to, the at least one processing unit 1110 described above, the at least one storage unit 1120 described above, a bus 1130 connecting different system components, including the storage unit 1120 and the processing unit 1110, and a display unit 1140.

[0131] The storage unit stores program code that can be executed by the processing unit 1110, so that the processing unit 1110 performs the steps described in the "Exemplary Method" section of the present specification according to various exemplary embodiments of the present disclosure.

[0132] The storage unit 1120 can include a readable medium in the form of a volatile storage unit, such as a random access memory (RAM) 1121 and / or a cache memory 1122, and can further include a read-only memory (ROM) 1123.​

[0133] The storage unit 1120 also includes a program / utility 1124 having a set (at least one) of program modules 1125, including an operating system and microinstruction routine, one or more application programs, other program modules, and program data, each of which

[0134] The bus 1130 can represent one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration bus, a processor or local bus using any of a variety of bus architectures, and a local wireless data transmission link.

[0135] The electronic device 1100 can also communicate with one or more external devices 1200 such as a keyboard or pointing device, a Bluetooth device, etc.; one or more devices that enable a user to interact with the electronic device 1100; and / or one or more devices (e.g., a router, a modem, a server, etc.) that enable the electronic device 1100 to communicate with one or more other computing devices. Such communication can occur via an input / output (I / O) interface 1150. Still yet, the electronic device 1100 can communicate with one or more networks, such as one or more local area networks (LANs), one or more wide area networks (WANs), and / or one or more public networks, such as the Internet, via the network adapter 1160. As depicted, the network adapter 1160 can communicate with the other components of the electronic device 1100 via the bus 1130. It should be appreciated that the electronic device 1100 can be implemented using a variety of other hardware and / or software components, including but not limited to microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data archival storage systems, etc.

[0136] Those skilled in the art will readily understand that the example embodiments described herein can be implemented by software and / or by hardware coupled with software, as described above. Thus, the technical solutions according to the embodiments of the present disclosure can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash disk, a mobile hard disk, etc.) or a network, and includes a number of instructions to enable a computing device (which can be a personal computer, a server, a terminal device, or a network device, etc.) to perform the methods according to the embodiments of the present disclosure.

[0137] In addition, the above-described figures are only schematic illustrations of the processes included in the methods according to the exemplary embodiments of the present disclosure, and are not intended to be limiting. It will be readily understood that the processes shown in the above-described figures do not indicate or limit the time sequence of the processes. In addition, it will also be readily understood that the processes can be performed synchronously or asynchronously, for example, in a plurality of modules.

[0138] Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the features disclosed herein. It is intended that the disclosure be construed as including any patently

[0139] It is understood that the present disclosure is not limited to the precise construction herein described and illustrated in the accompanying drawings, and that various modifications and changes can be made by those skilled in the art without departing from the scope thereof. The scope of the present disclosure is limited only by the claims that follow.

Claims

1. A distributed resource management system, characterized in that, The system includes a terminal module, a gateway routing module, a resource processing module, and an interplanetary file system layer for storing information resources; The terminal module is used to acquire information resources and encrypt them to obtain encrypted resources; The gateway routing module is used to perform activity detection on nodes in the InterPlanetary File System (IPS) layer based on pre-stored node identifiers, determine the valid nodes in the IPS layer based on the activity detection results, and maintain the number of valid nodes based on the activity detection results; the valid nodes are the nodes after filtering out illegal nodes and downtime nodes; The resource processing module is used to maintain a multi-level node linked list corresponding to the effective nodes based on the activity detection results and the number of effective nodes, and to use the multi-level node linked list to schedule the target effective nodes to process the encrypted resources. The multi-level node linked list includes a cache node table and a core node table. The number of nodes in the cache node table is less than the number of nodes in the core node table. The resource processing module is configured to prioritize obtaining the target valid node from the cache node table. The gateway routing module includes: An activity detection unit is used to detect the activity of nodes in the interplanetary file system layer based on pre-stored node identifiers, so as to filter out downtime nodes whose node identifiers have changed. The supplementary node determination unit is used to randomly activate a target node when there are more than a preset number of nodes that have been filtered out, and search for active and healthy nodes with the target node as the center and a preset distance value as the radius to obtain supplementary nodes; The identification configuration unit is used to assign node identifiers to the target node and the supplementary node, and to designate the target node and the supplementary node with node identifiers as the valid nodes.

2. The system according to claim 1, wherein the resource processing module comprises: A node linked list maintenance unit is used to divide the valid nodes into multi-level node linked lists; A node update unit is used to update the supplementary node to the core node table; The node synchronization unit is used to synchronize the supplementary nodes in the core node table to the cache node table at preset time intervals.

3. The system according to claim 2, wherein the resource processing module further comprises: A node scheduling unit is used to retrieve a target valid node from the cache node table in response to a resource processing request from the terminal module. The node scheduling unit is also used to retrieve the target valid node from the core node table when the target valid node does not exist in the cache node table.

4. The system according to claim 1, characterized in that, The resource processing module further includes: The encryption unit is used to encrypt the key of the encrypted resource; the encryption unit is also used to encrypt the information resources in the information resources that are not encrypted by the terminal module. A storage unit is used to store the encrypted resources encrypted by the encryption unit in the valid node.

5. The system according to claim 4, characterized in that, The resource processing module further includes: The naming unit is used to name the encrypted resources stored in the valid node and to store the correspondence between the actual name of the valid node and the naming result; The naming result feedback unit is used to feed back the correspondence to the terminal module.

6. The system according to claim 5, characterized in that, The resource processing module further includes: A path planning unit is used to respond to a resource query operation instruction carrying the corresponding relationship from the terminal module and plan a query path to the valid node corresponding to the resource query operation instruction. The path planning unit is also used to feed back the query path to the target valid node, so that the target valid node can perform a query operation based on the query path.

7. A management system for risk protection contract certificate information, characterized in that, The management system includes a terminal module, a gateway routing module, a resource processing module, and an interplanetary file system layer for storing risk protection contract certificate information; The terminal module is used to obtain risk protection contract certificate information and encrypt it to obtain encrypted risk protection contract certificate information. The gateway routing module is used to perform activity detection on nodes in the InterPlanetary File System (IPS) layer based on pre-stored node identifiers, and to determine the valid nodes in the IPS layer based on the activity detection results and to maintain the number of valid nodes based on the activity detection results; the valid nodes are the nodes after filtering out illegal nodes and downtime nodes; The resource processing module is used to maintain a multi-level node linked list corresponding to the effective nodes based on the activity detection results and the number of effective nodes, and to use the multi-level node linked list to schedule the target effective node to process the encrypted risk protection contract certificate information. The multi-level node linked list includes a cache node table and a core node table. The number of nodes in the cache node table is less than the number of nodes in the core node table. The resource processing module is configured to prioritize obtaining the target valid node from the cache node table. The gateway routing module includes: An activity detection unit is used to detect the activity of nodes in the interplanetary file system layer based on pre-stored node identifiers, so as to filter out downtime nodes whose node identifiers have changed. The supplementary node determination unit is used to randomly activate a target node when there are more than a preset number of nodes that have been filtered out, and search for active and healthy nodes with the target node as the center and a preset distance value as the radius to obtain supplementary nodes; The identification configuration unit is used to assign node identifiers to the target node and the supplementary node, and to designate the target node and the supplementary node with node identifiers as the valid nodes.

8. A distributed resource management method, applied to the system described in any one of claims 1 to 6, characterized in that, include: The terminal module acquires information resources and encrypts them to obtain encrypted resources; The gateway routing module performs activity detection on the nodes in the InterPlanetary File System (IPS) layer based on the pre-stored node identifiers, and determines the valid nodes in the IPS layer based on the activity detection results, and maintains the number of valid nodes based on the activity detection results; the valid nodes are the nodes after filtering out illegal nodes and downtime nodes; The resource processing module maintains a multi-level node linked list corresponding to the effective nodes based on the activity detection results and the number of effective nodes, and uses the multi-level node linked list to schedule the target effective nodes to process the encrypted resources; The multi-level node linked list includes a cache node table and a core node table. The number of nodes in the cache node table is less than the number of nodes in the core node table. The resource processing module is configured to prioritize obtaining the target valid node from the cache node table. The gateway routing module includes: An activity detection unit is used to detect the activity of nodes in the interplanetary file system layer based on pre-stored node identifiers, so as to filter out downtime nodes whose node identifiers have changed. The supplementary node determination unit is used to randomly activate a target node when there are more than a preset number of nodes that have been filtered out, and search for active and healthy nodes with the target node as the center and a preset distance value as the radius to obtain supplementary nodes; The identification configuration unit is used to assign node identifiers to the target node and the supplementary node, and to designate the target node and the supplementary node with node identifiers as the valid nodes.

9. A storage medium having a computer program stored thereon, the computer program implementing the distributed resource management method according to claim 8 when executed by a processor.

10. An electronic device, comprising: processor; and a memory for storing executable instructions of the processor; wherein the processor is configured to execute the distributed resource management method according to claim 8 by executing the executable instructions.

Images